4 ms·
Here’s another good article on how to set up DANE/TLS using Handshake as your root of trust instead of CAs https://medium.com/@ca98am79/how-to-view-dane-tlsa-we
by troquerre 6y ago
Here’s another good article on how to set up DANE/TLS using Handshake as your root of trust instead of CAs https://medium.com/@ca98am79/how-to-view-dane-tlsa-websites-on-handshake-with-firefox-f55eb1dd5be9 https://medium.com/@ca98am79/how-to-view-dane-tlsa-websites-...
The use-case above is what I’m most excited about for Handshake, because CAs are basically trusted backdoors — every time people browse the internet they need to trust that thousands of CAs aren’t compromised and aren’t responding to their local court orders around the world to issue bad certs.